CVE-2026-95814 — Vaultwarden through 1.37.3 Authorization Bypass via Missing Status Check
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain…
Published: 2026-09-22 · CVSS: 8.6 · CVSS 4.0
Vaultwarden through 1.37.3 omits organization membership status validation from three cipher access-restriction queries, allowing revoked and not-yet-confirmed members to retain read, write, delete, and attachment access to organization ciphers. Attackers with revoked or pending membership can exploit missing status filters in get_user_collections_access_flags, get_group_collections_access_flags, and is_in_full_access_group to access protected cipher data server-side.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7